Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/pPj0AN_LbIG5edwMDA59ThE3RKk.roa
File: pPj0AN_LbIG5edwMDA59ThE3RKk.roa (raw, json)
Hash identifier: tv9SuA0cMfqr0L1nuGX2Myng2miGRH68D2F/qwMX0QU=
Subject key identifier: A4:F8:F4:00:DF:CB:6C:81:B9:79:DC:0C:0C:0E:7D:4E:11:37:44:A9
Certificate issuer: /CN=c9c64c3ea41e52dbfab644d770f358ed044003f2
Certificate serial: 0198FEB957C6E5E82373E17F046FA3A3B11F
Authority key identifier: C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/pPj0AN_LbIG5edwMDA59ThE3RKk.roa
Signing time: Sun 31 Aug 2025 06:03:36 +0000
ROA not before: Sun 31 Aug 2025 06:03:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214863
IP address blocks: 194.106.204.0/24 maxlen: 24
194.106.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fe:b9:57:c6:e5:e8:23:73:e1:7f:04:6f:a3:a3:b1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c64c3ea41e52dbfab644d770f358ed044003f2
Validity
Not Before: Aug 31 06:03:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4f8f400dfcb6c81b979dc0c0c0e7d4e113744a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:2f:e0:e1:93:5f:8a:d9:c0:d2:20:65:f5:
89:d5:a0:0e:d9:cd:92:b1:d0:92:4b:6c:b7:87:63:
20:8c:f9:0b:9f:a4:8a:03:4e:91:57:1c:fa:c9:c3:
30:40:60:77:16:79:33:79:ed:6e:4f:e5:ce:f8:f8:
e8:67:4e:da:b1:7a:55:8c:e0:eb:cf:71:c6:9d:f1:
03:b0:4c:26:4b:c5:94:76:cf:42:74:2f:50:88:10:
83:87:97:03:05:1f:9c:3f:c9:3b:91:85:64:df:c0:
4a:6b:23:dd:3c:4c:ca:e7:49:54:0f:b2:b2:d6:66:
0f:df:4f:a1:86:9b:64:19:eb:94:e1:7e:11:ab:25:
f2:67:1d:40:9d:f7:2d:c3:c0:0f:7f:9a:6f:32:a1:
8a:4a:18:f0:09:73:15:7e:8b:92:0d:66:15:b2:97:
cd:53:4e:a8:9f:72:0f:19:9a:2e:fb:4b:35:41:dc:
1a:bd:ef:e3:ec:8c:70:fb:a6:b8:c9:f1:04:b0:1c:
68:16:66:12:a2:9b:42:3d:ec:5e:63:9d:4b:b7:4a:
c4:e7:89:bf:c2:9f:a7:0d:99:b4:cb:7f:ed:9d:89:
1c:4a:95:8d:1a:2d:82:48:8a:bc:e4:0d:56:00:c5:
f3:88:75:a5:e4:d1:8d:34:2c:58:30:fe:78:18:75:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F8:F4:00:DF:CB:6C:81:B9:79:DC:0C:0C:0E:7D:4E:11:37:44:A9
X509v3 Authority Key Identifier:
keyid:C9:C6:4C:3E:A4:1E:52:DB:FA:B6:44:D7:70:F3:58:ED:04:40:03:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycZMPqQeUtv6tkTXcPNY7QRAA_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/pPj0AN_LbIG5edwMDA59ThE3RKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/dc8f27-eeee-4090-8c26-8cba8ccdf981/1/ycZMPqQeUtv6tkTXcPNY7QRAA_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.106.204.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:6b:b4:63:46:fb:f9:3b:3b:34:a8:90:5e:49:bd:4f:28:3c:
17:a9:b7:26:7b:4c:a6:94:ec:27:46:d8:52:b4:17:80:4e:f5:
fa:06:6b:cb:24:82:70:02:8e:6f:2e:a5:6a:0a:71:2f:5c:bb:
cb:f4:55:ca:d7:7e:88:ac:8f:55:0d:56:68:36:86:d2:1d:10:
df:30:8f:8f:16:67:87:8b:8c:a2:15:f9:25:39:ed:5b:f5:7a:
87:48:75:9a:ff:ef:70:3c:05:f8:a1:44:94:98:7b:2b:7a:1c:
11:3b:b6:f9:d8:4a:7c:e8:e1:a8:cc:24:77:dc:62:3e:88:17:
f6:6e:e8:90:b9:36:c8:e7:16:38:43:ea:31:4a:25:5c:2c:1c:
5e:c9:39:62:b2:38:92:8b:d2:21:27:1b:db:f7:7b:68:50:09:
38:3a:d6:0e:64:ce:f3:3d:4e:da:7b:57:b7:09:7a:9d:41:db:
a6:40:0e:40:de:a1:a9:8b:26:f4:b3:05:34:b4:9c:be:71:4d:
5d:ad:7c:12:bb:12:62:ad:54:78:51:34:91:02:ab:95:38:57:
e1:86:f4:e5:20:45:4a:6f:6f:9e:27:40:a0:2c:dd:1b:d9:8d:
07:7d:53:6d:63:e4:7d:a2:86:e3:a6:de:99:48:e1:50:13:47:
2d:d6:09:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:07:03 2025 by rpki-client